$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: 34aoByLtMvLzgYL7i7KutrbX98R1lfTVrV1ktO7WBXw= Subject key identifier: 86:DA:D7:15:A4:00:CD:FC:FF:BA:BC:60:A5:1F:BF:40:19:1A:9E:77 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 224041AE36754442A6FCACD92734D523C3E3E9D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: 21 Signing time: Sun 27 Apr 2025 20:01:53 +0000 Manifest this update: Sun 27 Apr 2025 19:56:53 +0000 Manifest next update: Mon 28 Apr 2025 22:16:53 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: 3U64E4ESpaXgj6ghHXdjYwZ8sA/QuF7cu653GFdFp7w=) 3: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:40:41:ae:36:75:44:42:a6:fc:ac:d9:27:34:d5:23:c3:e3:e9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Apr 27 19:56:53 2025 GMT Not After : Apr 28 22:16:53 2025 GMT Subject: CN=86DAD715A400CDFCFFBABC60A51FBF40191A9E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:e5:50:0d:b6:26:47:c0:17:15:56:6b:51: 4e:08:2f:cc:7c:a4:1b:68:92:db:22:36:4f:db:90: dd:ff:29:21:68:2f:c2:2e:df:e2:46:60:59:c2:53: b1:96:73:a7:f1:5f:c5:1a:f8:94:f5:30:b1:05:a1: 05:75:5a:51:59:4c:2a:67:10:48:63:84:e4:f5:c0: 8c:0e:71:f0:e7:6e:46:6d:56:8d:a8:67:3f:ff:e0: 71:7f:fc:2e:2b:b2:fe:34:ee:66:96:35:6f:a5:c6: b4:4b:6c:b1:45:02:10:c4:2b:aa:da:a4:02:c6:49: 49:a2:e0:78:e5:e8:7e:2c:37:d8:03:2e:c7:cd:1c: 9d:e6:6a:0b:2f:93:96:4a:b2:08:cf:fc:d7:92:d9: 67:b4:5b:bb:09:1b:bc:10:cb:dc:6c:40:48:26:d2: 80:8c:ea:60:d8:f9:1d:33:f8:58:0c:b0:35:66:bd: 62:25:85:50:09:bb:e5:49:f3:25:d6:a6:16:38:78: 1a:46:01:a6:83:13:d5:6a:7d:30:e0:20:19:d3:5c: 20:e7:e2:73:03:b3:9e:90:9c:b2:29:ac:71:39:94: 03:d8:0a:3c:51:c3:2c:ac:18:1f:e6:76:64:5d:d0: 49:08:ef:e5:1e:53:4e:8f:13:8a:ae:fe:4e:90:05: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:D7:15:A4:00:CD:FC:FF:BA:BC:60:A5:1F:BF:40:19:1A:9E:77 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:98:63:70:35:f9:09:a6:4d:3c:48:43:c3:ce:30:60:e6:1e: 4a:5e:28:a1:a9:40:fc:bd:07:f8:e7:a4:bb:fb:5c:36:32:55: 4e:73:27:a3:1d:a4:3a:d3:69:e7:a9:bf:22:53:f4:ee:a7:ed: 5d:a6:bd:23:7c:cd:57:9b:37:08:bd:6b:fe:b8:fa:d0:e4:63: 9c:1a:3b:f0:39:db:01:e6:51:09:bb:a1:ef:f2:cb:89:7f:ae: 40:60:c8:49:fa:e1:67:ec:e9:ad:f6:58:6f:80:37:43:2b:bc: 82:5f:7e:fa:05:5f:1f:38:1e:20:4b:b7:2e:14:75:67:ed:a3: 9c:a1:9d:84:4b:5e:50:b9:3d:ab:8f:a1:17:6b:45:e1:fd:26: d7:69:20:a0:b0:4a:4f:d8:7c:d4:52:e8:f6:a7:1a:4e:fc:12: a7:f9:47:bf:12:43:7c:e6:a6:83:29:73:9d:62:65:02:ce:10: 99:f1:b2:a0:9a:b6:1a:f9:08:f0:97:ca:fe:79:bc:6c:d7:d4: 35:00:01:ec:34:5e:3c:d6:69:47:f3:81:fe:22:17:2d:59:d8: 09:6e:46:ff:6b:7f:79:76:92:20:e6:0f:00:47:df:45:ec:f4: ae:60:97:14:47:17:db:69:94:ca:81:37:15:de:46:6d:69:78: 29:22:15:c5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIkBBrjZ1REKm/KzZJzTVI8Pj6dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA0MjcxOTU2NTNaFw0yNTA0MjgyMjE2NTNaMDMxMTAvBgNV BAMTKDg2REFENzE1QTQwMENERkNGRkJBQkM2MEE1MUZCRjQwMTkxQTlFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/OVQDbYmR8AXFVZrUU4IL8x8 pBtoktsiNk/bkN3/KSFoL8Iu3+JGYFnCU7GWc6fxX8Ua+JT1MLEFoQV1WlFZTCpn EEhjhOT1wIwOcfDnbkZtVo2oZz//4HF//C4rsv407maWNW+lxrRLbLFFAhDEK6ra pALGSUmi4Hjl6H4sN9gDLsfNHJ3magsvk5ZKsgjP/NeS2We0W7sJG7wQy9xsQEgm 0oCM6mDY+R0z+FgMsDVmvWIlhVAJu+VJ8yXWphY4eBpGAaaDE9VqfTDgIBnTXCDn 4nMDs56QnLIprHE5lAPYCjxRwyysGB/mdmRd0EkI7+UeU06PE4qu/k6QBYvDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhtrXFaQAzfz/urxgpR+/QBkanncwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQComGNw NfkJpk08SEPDzjBg5h5KXiihqUD8vQf456S7+1w2MlVOcyejHaQ602nnqb8iU/Tu p+1dpr0jfM1XmzcIvWv+uPrQ5GOcGjvwOdsB5lEJu6Hv8suJf65AYMhJ+uFn7Omt 9lhvgDdDK7yCX376BV8fOB4gS7cuFHVn7aOcoZ2ES15QuT2rj6EXa0Xh/SbXaSCg sEpP2HzUUuj2pxpO/BKn+Ue/EkN85qaDKXOdYmUCzhCZ8bKgmrYa+Qjwl8r+ebxs 19Q1AAHsNF481mlH84H+IhctWdgJbkb/a395dpIg5g8AR99F7PSuYJcURxfbaZTK gTcV3kZtaXgpIhXF -----END CERTIFICATE-----Generated at Mon Apr 28 00:46:49 2025 by rpki-client